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Byp^t-A £ f mi (ffPA) mcsde\ configured to implement a first object, a second object, and an 
association between the first object and the second object." (Emphasis added). As amended, the 
system also includes "a security model configured to implement an association class object for the 
association between the first object and the second object m thf? RKA model, such that properties of 
the association class object define security between the first object and the second object." 
(Emphasis added). 

riftim Rejections 

In section 4 of the Office Action, claims 1, 3-18, 20-34 and 36-39 were rejected under 35 
U.S.C. § 103(a) as being unpatentable over Boozer et aL (U.S. Patent Pub. No. 2004/0205355 Al) 
in view of Colbum et aL (U.S. Patent No. 6,173,404). In support of the rejection under 35 U.S.C § 
103(a), the Office Action stated that Boozer et al. (hereafter Boozer) teach "a 
method/syscem/computer readable medium for providing Rcsource-Event-Agent (REA) model 
based security." More specifically, the Office Action stated that Boozer teach the steps of 
"[identifying an association between a first object and a second object in an REA model," and 
"[cheating an association class for the association between the first object and the second object, 
the association class defining security between the first object and the second object/* As before, 
the statement that Boozer teach the step of identifying an association between a first object and a 
second object in an REA model is traversed. The Office Action acknowledges that Boozer does not 
teach creating an association class object having properties, with the properties of the association 
class object defining security between the first object and the second object. However, the Office 
Action insiead recites col. 6, lines 42-52 of Colbum et aL (hereafter Colbum) for providing this 
teaching. ITie Office Action concludes that it would have been obvious to one of ordinary skill in 
the art to combine the teachings of Boozer and Colbum, and that such a combination renders the 
rejected cbiims obvious. 

In section 6 of the Office Action, the Examiner provided a response to Applicant's 
previously presented arguments that Boozer does not teach REA models or REA model based 
security. h\ responding to the arguments, the Office Action stated that "a recitation of the intended 
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